Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : FFmpeg vulnerabilities (USN-6430-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6430-1 advisory. It was discovered that FFmpeg did not properly handle certain inputs in vflagfun.c, resulting in a buffer overflow vulnerability...

DEBIAN-CVE-2020-22039

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inaviaddientry function...

CVE-2020-22039

FFmpeg 4.2 contains a Denial of Service vulnerability due to a memory leak in the inavi_add_ientry function (CVE-2020-22039). Exploitation could cause denial via memory growth. The issue is addressed in vendor advisories (Ubuntu USN-6430-1 and openSUSE/SUSE-SU-2021:2322-1), with patches in the co...